Ransom.Ekans
ThreatDown is now the name of the Malwarebytes line of business products. References to Malwarebytes below reflect the amazing technology used to first identify the threat.
Short bio
Ransom.Ekans is Malwarebytes’ detection name for a highly targeted ransomware family. This family appears to have a special interest for Industrial Control Systems (ICS).
Type of infection
Ransomware is a category of malware that holds files or systems hostage for ransom. Ransom.Ekans is very likely dropped inside affected networks by using open RDP connections. Once delivered Ransom.Ekans checks whether the system it is running on belongs to a certain domain and if so, it starts encrypting the files on the system.
Protection
Malwarebytes detects and protects against Ransom.Ekans
Home remediation
Malwarebytes can detect and remove Ransom.Megacortex without further user interaction.
Take note, however, that removing this ransomware does not decrypt your files. You can only get your files back from backups you made before the infection happened.